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[0025] 

When the failure detecting unit 41 detects af ailure 
of a device, the failure management unit 42 refers to 
a degeneracy possibility flag in the degeneracy 
5 information storing area for each device type 44 

corresponding to the type of the device about which the 
failure was detected, so that when the flag indicates 
that the degeneracy is possible, the failure management 
unit 42 disconnects the device about which the failure 
10 was detected and causes the operation of the system to 

continue, and when the flag indicates that the degeneracy 
is impossible, the failure management unit 42 stops the 
operation of the system. 
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